Northern Kentucky University has repeatedly insisted that the FERPA privacy statute forbids disclosure of any information about how it responds to students' claims of sexual assault, but a U.S. district judge has now sanctioned the university's legal counsel for over-reliance on FERPA to obstruct a student's Title IX lawsuit.